From bfd74bb54d9046273de334f26c49d8205bc8a2ed Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Tue, 27 Feb 2018 15:03:26 +0100
Subject: [PATCH] add Thanatos ransomware

---
 clusters/ransomware.json | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 8bcd4d4b..206845f0 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -8750,6 +8750,16 @@
           ".fairytail"
         ]
       }
+    },
+    {
+      "value": "Thanatos",
+      "description": "first ransomware seen to ask for payment to be made in Bitcoin Cash (BCH)",
+      "meta": {
+        "refs": [
+          "https://mobile.twitter.com/EclecticIQ/status/968478323889332226",
+          "https://www.eclecticiq.com/resources/thanatos--ransomware-first-ransomware-ask-payment-bitcoin-cash?type=intel-report"
+        ]
+      }
     }
   ],
   "source": "Various",